Newsheise Security
Passkeys in der Praxis – Teil 2: Registrierung und Authentifizierung
Teaser from the source
Die exakten Abläufe bei Registrierung und Anmeldung per Passkey sind komplex. Wer sie kennt, kann das Verfahren sicher und spezifikationsgemäß implementieren.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on Passkeys
Other advisories
- MediumCVE-2026-106264Fehlende Zugriffskontrolle in der Web-Authentifizierung (Passkeys & Sicherheitsschlüssel) in Google Chrome vor Version 155.
- Not ratedosv:CVE-2026-54460OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
- MediumCVE-2026-79108Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys)
- MediumCVE-2026-79178Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys)
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
- MediumCVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
- Not ratedosv:CVE-2026-64866New API: Admin can reset passkeys for same-level or higher-privileged users
Other news entries
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityNewsThe Hacker News
- Password manager mSecure tells users to change passwords, won't say whyNewsThe Register — Security
- mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwordsBreachpwn.watch
- Passkeys Are Better Than Passwords. But They Are Not Enough.NewsSecurityWeek
- Microsoft urges Entra ID admins to migrate users to passkeysNewsBleepingComputer
- Microsoft reminds admins to migrate Entra ID users to passkeysNewsBleepingComputer
- UK.gov begins killing off passwords for 23 million usersNewsThe Register — Security
ID